Changelog

Terms of Service and Refund policy published at /terms and /refunds — the contractual surface a merchant-of-record checkout review expects. Linked from the footer, cached and in the sitemap like every public page.

MCP operator scope: the /mcp endpoint now exposes the full operating loop (status, discovery, onboarding, collection, leads, deliverables) as authenticated tools with standard safety annotations and self-describing resources, so an autonomous agent can run the service through one protocol. Every mutating action lands in an append-only operator ledger, on every channel.

Security hardening: strict nonce-based CSP now covers every page including the operator console (all inline handlers refactored); admin auth is constant-time and header-only; off-box backup push ships behind one config line.

Full-system audit: pages are served from a locale-aware render cache (p95 under a 32-client burst cut ~45%), static assets are content-versioned with a one-year immutable policy, every page carries a nonce-based Content-Security-Policy, and the status page now reports the same deduplicated panel numbers as the API.

Extraction traps closed after a stratified sample review: calendar years, benefit allowances, payment-count annualization (Austrian 14-salary convention), 'p/m' abbreviations and spelled-out 'Euro' currency; 62 stored rows re-extracted or cleared. Verified daily database backups with automatic restore checks now ship by default.

French and Spanish locales at 100% key parity; hreflang and the sitemap extend automatically.

CORS enabled on /api/v1 and /mcp for browser-side integrations; page routes remain same-origin.

extractor_mix published in /api/v1/quality: the share of stated salaries parsed deterministically, read from platform structured fields, or swept by the LLM residual pass.

Salary extraction guards extended: project budgets, funding rounds, commission amounts and weekly figures are no longer bookable as base pay. 174 stored rows re-extracted and corrected; the explorer's top-of-book is employer-stated ranges only.

PayEvidence Indices shipped: Hiring Momentum Index (HMI), Pay Transparency Index (PTI) and Stated Pay Index (SPI), methodology v1 — with CSV/JSON export, an MCP tool and embeddable cards.

Extraction pipeline refactored to three phases so LLM calls never hold the database write lock; label memoization added so a title is never billed twice.

Point-in-time panel widened: detail-fetch platforms (Workday, SmartRecruiters) carry forward out-of-slice fields so content hashes stay stable and no synthetic salary events are fabricated.

Bulk export (CSV.gz), MCP endpoint for AI agents, API key metering with daily quotas, and the multi-dimensional cube endpoint shipped for commercial use.